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DETAILED ACTION 

1 . Claims 1 -28 are pending. 

Response to Arguments 

2. Applicant's arguments filed 16 June 2005 have been fully considered but they are 
not moot in view of the new grounds of rejection. 

Claim Rejections - 35 USC § 103 

3. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 1 02 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

4. Claims 1-3, 8-9, 13-16, and 20 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Atkinson et al US Patent No 5,892,904 in view of Matias et al US 
Patent No 6,681,017 and Klein et al US Patent No. 5,872,850. 

5. With regards to claims 1 and 14, Atkinson teaches receiving a data request from 
a client (Atkinson, column 1 lines 19-48), retrieving data based on the received data 
request (Atkinson, column 1 lines 19-48, column 5 lines 37-44), formatting the retrieved 
data wherein the formatted data includes at least one authenticity key (Atkinson, column 
5 line 64 - column 6 line 28), returning the formatted data to the client (Atkinson, 



Application/Control Number: 09/656,074 Page 3 

Art Unit: 2134 

column 6 lines 11-16), and authenticating the authenticity key to verify the source of the 
formatted data (Atkinson, column 6 lines 8-9 and 44-49). Atkinson fails to teach the 
formatting occurring in real time at the server and the retrieving of a preferences key to 
decrypt a preferences file. Matias teaches that upon retrieving the data, formatting of 
the retrieved data occurs in real time at the server (Matias, column 7 lines 29-43, mac 
and nonce). Klein teaches retrieving a preferences key from said server based on said 
authentication (Klein, column 32 lines 30-46) and decrypting a preferences file using 
said preferences key (Klein, column 32 lines 30-46, column 23 line 65 - column 33 line 
5). At the time the invention was made, it would have been obvious to a person of 
ordinary skill in the art to utilize Matias' method of applying formatting in real time and 
Klein's method of decrypting preferences files with Atkinson's code certification system 
because it offers the advantages of providing the client a simple method of verifying that 
a server response is associated with a client request (Matias, column 2 lines 35-48) and 
allowing a user to maintain control over their personal information (Klein, column 2 lines 
5-38). 

6. With regards to claims 2 and 15, Atkinson as modified teaches the formatted 
data being a web page (Matias, column 4 lines 1-9, web page). 

7. With regards to claims 3 and 16, Atkinson as modified teaches the reading of the 
formatted data at the client (Atkinson, column 7 lines 35-38), determining if the 
formatted data includes the at least one authenticity key (Atkinson, column 7 lines 35- 
45), and verifying authenticity based on the authenticity key if it is included (Atkinson, 
column 7 lines 27-30). 
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8. With regards to claims 8 and 13, Atkinson teaches a client, server, and a network 
wherein the client and server communicate (Atkinson, Figure 2A), an authentication 
server that is in communication with the server (Atkinson, column 5 line 64 - column 6 
line 16), and an authentication server being configured to insert an authenticity key into 
the data requested from the client thereby facilitating the client to authenticate the 
authenticity key to verify the source of the data (Atkinson, column 6 lines 1-17), but fails 
to teach the data requested being a webpage. Matias teaches the data requested being 
a webpage (Matias, column 4 lines 1-9, web page). At the time the invention was 
made, it would have been obvious to a person of ordinary skill in the art to utilize Matias' 
method of applying formatting in real time to a web page with Atkinson's code 
certification system because it offers the advantage of providing the client a simple 
method of verifying that a server response is associated with a client request (Matias, 
column 2 lines 35-48). 

9. With regards to claim 9, Atkinson as modified teaches a client including a 
browser (Atkinson, column 5 lines 47-44) wherein pages are displayed to a user on a 
display device on the client (Atkinson, column 5 lines 45-63). 

10. With regards to claim 20, Atkinson as modified teaches the receiving and 
returning steps being implemented via at least one of the Internet, interactive television 
system, broadband system, regular band system, wireless system, radio transmission, 
landline phone system, and cellular phone system (Atkinson, column 5 lines 25-35). 
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11 Claims 4, 6, 10-11, 17, and 23 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Atkinson et al US Patent No 5,892,904, Matias et al US Patent No. 
6,681,017, and Klein et al US Patent No. 5,872,850, as applied to claims 3, 8, 10 and 
16 above, and in further view of Wallent et al US Patent No 6,366,912. 

12. With regards to claims 4 and 17, Atkinson as modified teaches the verification of 
an authenticity stamp (Atkinson, column 7 lines 23-30) but fails to teach the displaying 
of the data based on the verification of the authenticity key. Wallent discloses a 
browser that displays data based on the verification of a security rules (Wallent, column 
1 1 line 18 - column 12 line 3). At the time the invention was made, it would have been 
obvious to a person of ordinary skill in the art to utilize Wallent's method of displaying 
data after verifying the security procedures because it offers the advantage of allowing 
the browsing of the World Wide Web while reducing the risks of malicious code being 
downloaded from a web page (Wallent, column 1 lines 24-37 and column 2 lines 10-19). 

13. With regards to claims 6 and 23, Atkinson as modified teaches an authenticity 
key being applied to each file (Atkinson, column 6 lines 11-16) but fails to teach the file 
being a graphic file. Wallent teaches the downloading to a user of a web page as 
described above and the web page including a graphic file (Wallent, column 1 lines 31- 
35). 

14. With regards to claims 10-11, Atkinson as modified teaches the adding of an 
authentication key to an object and its subsequent verification but fails to specifically 
teach the object being a page and thus a server sending a page to the client. Wallent 
teaches a server sending a page to a client (Wallent, Figure 9). At the time the 
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invention was made, it would have been obvious to a person of ordinary skill in the art to 
utilize Wallent's method of applying security to web pages sent from a server because it 
offers the advantage of allowing the browsing of the World Wide Web while reducing the 
risks of malicious code being downloaded from a web page (Wallent, column 1 lines 24- 
37 and column 2 lines 10-19). 

15. Claims 5, 7, 12, and 18-19 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Atkinson et al US Patent No 5,892,904, Matias et al US Patent No. 
6,681,017, Klein et al US Patent No. 5,872,850 and Wallent et al US Patent No 
6,366,912 as applied to claims 4, 1 1 , and 17 above, and further in view of Houser et al 
US Patent No 5,606,609. 

16. With regards to claims 5 and 18, Atkinson as modified above fails to teach the 
displaying of an authenticity stamp. Houser teaches an authenticity stamp being 
displayed for data that has been successfully verified (Houser, column 8 lines 12-15 and 
column 7 lines 52-59). At the time the invention was made, it would have been obvious 
to a person of ordinary skill in the art to utilize Houser's method of displaying an 
authenticity stamp because it offers the advantage of providing a user friendly deterrent 
to forgery and alterations to documents (Houser, column 3 lines 15-46). 

1 7. With regards to claim 7 and 1 9, Atkinson as modified above fails to teach the 
displaying of a non-authenticity stamp. Houser teaches an non-authenticity stamp 
being displayed for data that has been unsuccessfully verified (Houser, column 16 lines 
44-48). 
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18. With regards to claim 12, Atkinson as modified above fails to teach the display 
including an indication of the authenticity based on the authenticity key. Houser 
teaches an authenticity stamp being displayed when an authenticity stamp is verified 
(Houser, column 8 lines 12-15 and column 7 lines 52-59). At the time the invention was 
made, it would have been obvious to a person of ordinary skill in the art to utilize 
Houser' s method of displaying an authenticity stamp because it offers the advantage of 
providing a user friendly deterrent to forgery and alterations to documents (Houser, 
column 3 lines 15-46). 

19. Claim 21 is rejected under 35 U.S.C. 103(a) as being unpatentable over Atkinson 
et al US Patent No 5,892,904, Matias et al US Patent No. 6,681,017, and Klein et al US 
Patent No. 5,872,850, as applied to claim 1 above, and in further view of Asad et al US 
Patent No 6,539,093. Asad discloses a key ring organizer for an electronic business 
using public key infrastructure. 

20. With regards to claim 21 , Atkinson as modified teaches the step of authenticating 
the authenticity key to verify the source of the formatted data (Atkinson, column 6 lines 
8-9 and 44-49), but fails to teach the use of a browser plug-in interfacing with a MIME 
type. Asad teaches the use of a browser plug-in interfacing with a MIME type (Asad, 
column 7 lines 22-35). At the time the invention was made, it would have been obvious 
to a person of ordinary skill in the art to utilize Asad's method of using plug-ins 
interfacing with a MIME type with Atkinson as modified because it offers the advantage 
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of allowing the certification of third party keys by way of a browser initiating a request 
message to the plug-in (Asad, column 3 lines 20-42). 

21. Claim 22 is rejected under 35 U.S.C. 103(a) as being unpatentable over Atkinson 
et al US Patent No 5,892,904, Matias et al US Patent No. 6,681,017, and Klein et al US 
Patent No. 5,872,850, as applied to claim 8 above, and in further view of Walker et al 
US Patent No 6,286,001 . Walker discloses a system and method for authorizing access 
to data on content servers in a distributed network. 

22. With regards to claim 22, Atkinson as modified fails to teach the authentication 
server verifying a user ID and password. Walker teaches the authentication server 
verifying a user ID and password (Walker, column 1 1 lines 45-53). At the time the 
invention was made, it would have been obvious to a person of ordinary skill in the art to 
utilize Walker's user ID/password method with Atkinson as modified because it offers 
the advantage of allowing greater control over the authorization to view designated web 
sites (Walker, column 2 lines 52-64). 

23. Claim 24 is rejected under 35 U.S.C. 103(a) as being unpatentable over Atkinson 
et al US Patent No 5,892,904 in view of Matias et al US Patent No. 6,681,017, Klein et 
al US Patent No. 5,872,850 and Kou US Patent No 6,016,491 . 

24. With regards to claim 24, , Atkinson teaches receiving a data request from a 
client (Atkinson, column 1 lines 19-48), retrieving data based on the received data 
request (Atkinson, column 1 lines 19-48, column 5 lines 37-44), formatting the retrieved 
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data wherein the formatted data includes at least one authenticity key (Atkinson, column 
5 line 64 - column 6 line 16), returning the formatted data to the client (Atkinson, 
column 6 lines 11-16), and authenticating the authenticity key to verify the source of the 
formatted data (Atkinson, column 6 lines 8-9 and 44-49). Atkinson fails to teach the 
formatting occurring in real time at the server, determining if the data includes a code 
that requires the data to be authenticated, and the retrieving of a preferences key. 
Matias teaches that upon retrieving the data, formatting of the retrieved data occurs in 
real time at the server (Matias, column 7 lines 29-43, mac and nonce). Kou teaches the 
determining if the data includes a code that requires the data to be authenticated (Kou, 
column 5 lines 9-28). Klein teaches retrieving a preferences key from said server based 
on said authentication (Klein, column 32 lines 30-46). At the time the invention was 
made, it would have been obvious to a person of ordinary skill in the art to utilize Mafias' 
method of applying formatting in real time, Klein's method of retrieving a preferences 
key, and Kou's method of determining if security is needed with Atkinson's code 
certification system because it offers the advantages of providing the client a simple 
method of verifying that a server response is associated with a client request (Matias, 
column 2 lines 35-48), providing flexibility because different pieces of information 
require different forms of security protection (Kou, column 1 lines 31-35), and allowing a 
user to maintain control over their personal information (Klein, column 2 lines 5-38). 



Allowable Subject Matter 
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25. Claims 25-28 are objected to as being dependent upon a rejected base claim, 
but would be allowable if rewritten in independent form including all of the limitations of 
the base claim and any intervening claims. 

26. The following is a statement of reasons for the indication of allowable subject 
matter: The prior art fails to teach the decrypting of a preferences key, the decrypting of 
a preference file using the preferences key, obtaining instructions within the preferences 
file, and inserting a visual signature into said data based on the instructions stored in 
the preferences file, as defined in the limitations of the cited claims and thus fails to 
anticipate or render the above limitations obvious. 

Conclusion 



27. Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Andrew L. Nalven whose telephone number is 571 272 
3839. The examiner can normally be reached on Monday - Thursday 8-6, Alternate 
Fridays. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Gregory Morse can be reached on 571 272 3838. The fax phone number 
for the organization where this application or proceeding is assigned is 703-872-9306. 
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Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). 





